Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
File:                     PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft (raw, json)
Hash identifier:          nMPrZDSsuBQXGiGa85D91FfRoJcRSQ/TJHsjMviGRxU=
Subject key identifier:   6C:F7:17:AF:24:3A:62:42:DA:F8:07:CF:6A:06:CF:4F:04:12:DB:94
Authority key identifier: 3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
Certificate issuer:       /CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Certificate serial:       01962E994E878D1105033BCFE4D6AB48FF36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl (hash: VC0Vv+DgSNGy9PdGwOMinAaa0fp6YpwDOGTOJdgccic=)
                          2: baHbcRR9kf1ghjeGFAS82cVbM5E.roa (hash: ryV49aEsL3mdbzWN2VnZ4BiiOTM51N9BlYGHQV8L9fI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4e:87:8d:11:05:03:3b:cf:e4:d6:ab:48:ff:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=6cf717af243a6242daf807cf6a06cf4f0412db94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a4:93:24:a4:75:23:b1:ab:39:6b:3f:32:7f:
                    ea:59:ab:be:6b:6e:79:0a:d8:d9:3b:0d:5e:93:ec:
                    7b:be:66:76:7a:80:d3:9d:7f:94:db:96:8e:a1:eb:
                    74:99:db:80:db:66:3d:1b:7e:34:3a:8d:49:c9:0e:
                    93:a7:87:be:7b:0f:3d:6c:89:c5:1e:4c:c6:6a:ba:
                    16:a3:bc:d3:4c:6e:72:36:5a:e0:8b:c3:fb:3b:93:
                    c3:2f:44:75:5b:0d:9c:49:5b:b9:31:73:f8:21:a1:
                    ac:69:48:a4:90:00:60:49:ef:5a:b5:f2:04:83:67:
                    8a:d6:02:d9:db:f7:a1:1b:c9:d8:e5:0a:8e:aa:db:
                    ea:5e:f4:4f:26:f7:9b:38:f7:46:b3:2e:ad:1d:b2:
                    dc:4f:57:46:00:5f:03:67:d5:4d:5e:4e:3a:86:44:
                    b0:c5:70:85:b5:7a:12:99:4c:ec:eb:54:25:9f:68:
                    2f:16:33:e8:9a:89:88:ad:c8:a8:1c:85:b2:fb:ab:
                    d1:26:ef:5d:db:d9:3e:f6:3e:fa:35:0a:0d:12:af:
                    44:f9:0c:7f:3b:7b:88:39:43:c8:c9:90:36:2d:52:
                    48:ae:f5:75:7e:c2:ca:a6:6e:a9:6f:ee:b6:0c:41:
                    d8:99:94:7f:76:86:fd:10:e1:3b:a8:98:7c:85:c3:
                    0b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F7:17:AF:24:3A:62:42:DA:F8:07:CF:6A:06:CF:4F:04:12:DB:94
            X509v3 Authority Key Identifier:
                keyid:3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:77:6c:be:71:57:7e:6a:1f:ab:01:af:0a:4e:ef:f9:1b:af:
         55:dc:f6:69:98:94:76:3f:de:e8:99:4a:6b:07:68:10:2b:60:
         c6:c0:23:f4:48:cb:10:90:f1:bf:7a:1a:41:bf:54:cf:f2:8b:
         f7:f5:46:e7:77:86:db:9f:c3:1e:84:d1:f2:50:5d:eb:9e:84:
         76:69:bd:c5:c6:c9:45:fb:46:57:46:cd:e5:2c:c3:eb:29:02:
         34:99:54:8c:2c:ff:3b:60:cf:36:cf:db:09:89:09:1c:6b:e9:
         0e:d5:c5:44:91:07:70:24:a1:b3:04:1d:01:4c:5b:e8:35:6c:
         c6:bf:fb:b2:2e:af:3b:91:d9:c6:20:2b:ef:7c:0e:ca:87:d8:
         a0:85:76:62:db:15:e4:df:30:08:bc:10:95:a9:51:3e:58:88:
         61:70:bc:ef:bc:b0:3c:82:64:6f:3d:06:83:ae:8d:77:2e:78:
         14:c2:1b:37:71:64:bb:97:7c:bc:5a:53:5f:6f:71:e4:90:2a:
         4f:e3:e4:00:c6:0c:3a:8a:d9:cd:36:1d:c5:96:2f:e1:9d:48:
         50:80:f5:82:0a:87:91:ec:5d:c8:33:4f:2c:5b:58:17:20:a1:
         6a:e2:3a:2d:cf:d5:ee:c5:e8:09:d7:e0:bf:62:c5:67:e8:18:
         ef:b5:bd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----